hi,
On Wed, Oct 12, 2016 at 8:39 AM, Ivar Grimstad <ivar.grimstad_at_gmail.com>
wrote:
> Most projects I am involved in manage their own users. That means that my
> application's UserService will need to update/insert to the
> userPrincipal/UserRole tables that e.g. WildFly is configured with. It will
> also need to know the password encryption/hashing algorithm that are
> configured for the domain to be able to support "change
> password"/"forgotten password" functionality.
>
Same here, but it then happens the other way around; WildFly is configured
with an "identity store" that internally uses a UserService that uses said
userPrincipal/UserRole tables and hashing algorithm. The application can
access this same UserService directly, and thus everyone is happy.
WildFly can get users (credentials/groups) from the configured identity
store, and the application can additionally insert/update/delete users.
In that setup there's no configuration that only WildFly and not the app
knows about.
> That kind of destroys portability for these applications (even if that
> usually is no issue as we tend to stay with the same application server).
>
Likewise here ;)
Kind regards,
Arjan Tijms
>
> Ivar
>
>
>>
>>
>>
>>
>>
>>
>> 1. There was also a request to start holding regular
>> meetings -- weekly or bi-weekly, but regular.
>>
>>
>> +1
>>
>> Kind regards,
>> Arjan Tijms
>>
>>
>>
>>
>>
>>
>>
>> --
>>
>> You received this message because you are subscribed to the Google Groups
>> "Java EE Security API - JSR 375 - Experts" group.
>>
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to jsr375-experts+unsubscribe_at_googlegroups.com.
>>
>> To post to this group, send email to jsr375-experts_at_googlegroups.com.
>>
>> To view this discussion on the web visit https://groups.google.com/d/
>> msgid/jsr375-experts/CAE%3D-AhD%3D3V%2BvOGDToE2TupVH5R6N_
>> 77fbJSexg_H73M4H9QGdw%40mail.gmail.com
>> <https://groups.google.com/d/msgid/jsr375-experts/CAE%3D-AhD%3D3V%2BvOGDToE2TupVH5R6N_77fbJSexg_H73M4H9QGdw%40mail.gmail.com?utm_medium=email&utm_source=footer>
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>>